Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c4969146-5bee-4856-bc04-f3b1bf331985/e708eae99428b3cdc8b791407b5189dfcf52baea.roa
File:                     e708eae99428b3cdc8b791407b5189dfcf52baea.roa (raw, json)
Hash identifier:          sgJuzzS7cvPUaMse2bVrOk9XOw4OX7FlUmktcWk2MFs=
Subject key identifier:   43:72:3F:FA:A1:6A:03:A2:C2:68:4A:24:95:7B:46:D1:86:1F:6E:FD
Certificate issuer:       /CN=d509a47fb6051758d7bd1a005b513a23a55b4dec
Certificate serial:       079D09
Authority key identifier: 21:F7:70:A7:0D:F7:7B:80:FE:C1:5B:12:06:05:15:2A:86:C4:97:5C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d509a47fb6051758d7bd1a005b513a23a55b4dec.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c4969146-5bee-4856-bc04-f3b1bf331985/e708eae99428b3cdc8b791407b5189dfcf52baea.roa
Signing time:             Tue 25 Jul 2023 00:08:39 +0000
ROA not before:           Mon 24 Jul 2023 00:08:39 +0000
ROA not after:            Fri 25 Jul 2025 00:08:39 +0000
asID:                     272864
IP address blocks:        2803:5290::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 498953 (0x79d09)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d509a47fb6051758d7bd1a005b513a23a55b4dec
        Validity
            Not Before: Jul 24 00:08:39 2023 GMT
            Not After : Jul 25 00:08:39 2025 GMT
        Subject: CN=e708eae99428b3cdc8b791407b5189dfcf52baea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:75:09:f3:d4:23:72:76:bd:3f:fb:50:89:d9:
                    b6:1d:6b:87:7a:f3:82:4f:80:74:35:68:04:58:a4:
                    fd:83:0a:08:47:80:54:db:4a:29:06:6f:c9:7f:0c:
                    33:7c:47:3c:0c:72:d8:8a:60:e8:57:45:93:2e:60:
                    c8:66:c0:4e:52:b3:fe:4e:c3:a3:76:61:e3:40:b6:
                    5d:4c:86:da:31:9e:63:9c:64:00:68:18:0d:ca:40:
                    3c:59:4d:e2:0e:b7:eb:05:93:6d:67:66:f6:d3:ce:
                    84:15:26:cc:1d:ac:fc:70:99:5b:c7:c2:e8:1c:50:
                    04:a2:0f:24:9a:85:a3:c7:6c:6a:c0:45:f1:07:e9:
                    8d:db:ce:bd:d7:ac:2c:b6:ca:90:97:13:bb:a0:46:
                    25:51:6f:95:f1:a3:96:4b:b3:88:98:66:5b:fa:b6:
                    d1:c4:42:61:64:28:8e:66:6d:36:42:17:41:0a:0d:
                    bf:c3:a1:a2:86:1b:d1:04:e4:77:0c:c0:94:75:68:
                    60:fd:5f:0a:99:07:56:c4:71:a4:45:4c:f1:38:11:
                    de:b0:25:1e:2d:e9:87:7f:ec:d2:7b:f0:34:e6:98:
                    41:e1:0a:fd:9d:cb:ac:ad:36:ea:85:7e:20:b8:2c:
                    89:83:df:9b:47:46:12:b3:6c:7f:b9:17:d0:a9:ca:
                    e6:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:72:3F:FA:A1:6A:03:A2:C2:68:4A:24:95:7B:46:D1:86:1F:6E:FD
            X509v3 Authority Key Identifier:
                keyid:21:F7:70:A7:0D:F7:7B:80:FE:C1:5B:12:06:05:15:2A:86:C4:97:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d509a47fb6051758d7bd1a005b513a23a55b4dec.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c4969146-5bee-4856-bc04-f3b1bf331985/e708eae99428b3cdc8b791407b5189dfcf52baea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c4969146-5bee-4856-bc04-f3b1bf331985/d509a47fb6051758d7bd1a005b513a23a55b4dec.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5290::/32

    Signature Algorithm: sha256WithRSAEncryption
         3e:a7:9d:03:82:af:b5:ca:1f:36:d8:8f:30:47:cc:78:84:05:
         9b:85:78:64:9a:e1:f0:e0:bd:a6:9e:d5:f3:2b:c3:f6:90:76:
         6f:34:36:2f:88:5b:02:43:f9:ad:9e:21:cd:dd:83:0e:62:64:
         6c:24:a4:30:a7:e7:c8:2b:55:9d:32:f6:e3:95:dd:ca:77:e0:
         20:17:64:04:b0:72:cb:97:6f:20:3a:d6:55:cb:17:e4:45:92:
         fe:40:77:36:53:24:58:01:8c:e4:5e:43:44:df:20:99:1a:af:
         a6:76:19:24:dd:e7:22:46:bc:a8:01:79:0c:df:a7:1a:6e:48:
         6f:41:07:9f:a1:47:88:1c:0b:fe:9b:23:8f:ef:3d:68:2b:63:
         7b:89:c5:04:87:3b:3d:59:3d:e3:ac:8e:47:b1:a0:20:6a:47:
         e3:5c:46:2c:79:a7:16:43:c5:a2:0c:7c:55:7b:0e:b6:dc:83:
         79:63:2b:74:a4:d2:21:61:9d:c9:a7:2d:e2:48:87:f9:9d:c1:
         96:13:f9:d6:d2:9a:a1:c8:c7:5f:94:a7:6e:ea:65:84:9d:df:
         a0:7b:da:cf:8f:1a:aa:33:a7:c3:b6:36:31:d8:70:d4:4d:c0:
         85:0a:33:e9:99:7f:56:09:79:be:ed:ca:17:d5:57:fe:d8:48:
         be:a3:e5:64
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIDB50JMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGQ1
MDlhNDdmYjYwNTE3NThkN2JkMWEwMDViNTEzYTIzYTU1YjRkZWMwHhcNMjMwNzI0
MDAwODM5WhcNMjUwNzI1MDAwODM5WjAzMTEwLwYDVQQDEyhlNzA4ZWFlOTk0Mjhi
M2NkYzhiNzkxNDA3YjUxODlkZmNmNTJiYWVhMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAmHUJ89Qjcna9P/tQidm2HWuHevOCT4B0NWgEWKT9gwoIR4BU
20opBm/JfwwzfEc8DHLYimDoV0WTLmDIZsBOUrP+TsOjdmHjQLZdTIbaMZ5jnGQA
aBgNykA8WU3iDrfrBZNtZ2b2086EFSbMHaz8cJlbx8LoHFAEog8kmoWjx2xqwEXx
B+mN286916wstsqQlxO7oEYlUW+V8aOWS7OImGZb+rbRxEJhZCiOZm02QhdBCg2/
w6GihhvRBOR3DMCUdWhg/V8KmQdWxHGkRUzxOBHesCUeLemHf+zSe/A05phB4Qr9
ncusrTbqhX4guCyJg9+bR0YSs2x/uRfQqcrm3wIDAQABo4ICXDCCAlgwHQYDVR0O
BBYEFENyP/qhagOiwmhKJJV7RtGGH279MB8GA1UdIwQYMBaAFCH3cKcN93uA/sFb
EgYFFSqGxJdcMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZDUwOWE0
N2ZiNjA1MTc1OGQ3YmQxYTAwNWI1MTNhMjNhNTViNGRlYy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYzQ5NjkxNDYtNWJlZS00ODU2LWJjMDQtZjNiMWJm
MzMxOTg1L2U3MDhlYWU5OTQyOGIzY2RjOGI3OTE0MDdiNTE4OWRmY2Y1MmJhZWEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9jNDk2OTE0Ni01YmVlLTQ4NTYtYmMwNC1mM2Ix
YmYzMzE5ODUvZDUwOWE0N2ZiNjA1MTc1OGQ3YmQxYTAwNWI1MTNhMjNhNTViNGRl
Yy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR
MA8wDQQCAAIwBwMFACgDUpAwDQYJKoZIhvcNAQELBQADggEBAD6nnQOCr7XKHzbY
jzBHzHiEBZuFeGSa4fDgvaae1fMrw/aQdm80Ni+IWwJD+a2eIc3dgw5iZGwkpDCn
58grVZ0y9uOV3cp34CAXZASwcsuXbyA61lXLF+RFkv5AdzZTJFgBjOReQ0TfIJka
r6Z2GSTd5yJGvKgBeQzfpxpuSG9BB5+hR4gcC/6bI4/vPWgrY3uJxQSHOz1ZPeOs
jkexoCBqR+NcRix5pxZDxaIMfFV7Drbcg3ljK3Sk0iFhncmnLeJIh/mdwZYT+dbS
mqHIx1+Up27qZYSd36B72s+PGqozp8O2NjHYcNRNwIUKM+mZf1YJeb7tyhfVV/7Y
SL6j5WQ=
-----END CERTIFICATE-----